community-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves searching and retrieving data from external websites, creating a potential vector for indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: Community names, descriptions, and metadata are retrieved from external directories such as Reddit, Discord, Slack, and other online forums (SKILL.md).
- Boundary markers: The instructions do not specify any delimiters or safety warnings to ensure the agent ignores instructions potentially embedded in search results.
- Capability inventory: The skill primarily performs information retrieval and synthesis; it does not include high-risk capabilities like file system writes, local command execution, or network exfiltration of sensitive data.
- Sanitization: There are no explicit steps defined to sanitize or validate the content found in external community descriptions before processing it.
Audit Metadata